VDB
RHSA-2023%3A6257
RHSA-2023%3A6257
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RST_STREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any server-side limit for the maximum number of active streams per connection, resulting in a denial of service due to server resource consumption. Red Hat has rated the severity of this flaw as 'Important' as the US Cybersecurity and Infrastructure Security Agency (CISA) declared this vulnerability an active exploit. CVE-2023-39325 was assigned for the `Rapid Reset Attack` in the Go language packages.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:0ccc78a5bee86470de92084ef0d667741d4a342f89907083d66f1b8fb7fed3ff_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-authentication-operator@sha256:0ccc78a5bee86470de92084ef0d667741d4a342f89907083d66f1b8fb7fed3ff_amd64, openshift4/ose-cluster-authentication-operator@sha256:0ccc78a5bee86470de92084ef0d667741d4a342f89907083d66f1b8fb7fed3ff_amd64, openshift4/ose-cluster-authentication-operator@sha256:0ccc78a5bee86470de92084ef0d667741d4a342f89907083d66f1b8fb7fed3ff_amd64 |
| Red Hat | openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le, openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le, openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le |
| Red Hat | openshift4/ose-prometheus@sha256:4351a8d0cc3d8aecdf36b3e1818258e36474eff7605a474dee95307026bb2f8c_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus@sha256:4351a8d0cc3d8aecdf36b3e1818258e36474eff7605a474dee95307026bb2f8c_amd64, *, openshift4/ose-prometheus@sha256:4351a8d0cc3d8aecdf36b3e1818258e36474eff7605a474dee95307026bb2f8c_amd64 |
| Red Hat | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:df712d87dbe3c49b18a605b01336697d816168127353252568e33023ce1e66e9_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:df712d87dbe3c49b18a605b01336697d816168127353252568e33023ce1e66e9_ppc64le, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:df712d87dbe3c49b18a605b01336697d816168127353252568e33023ce1e66e9_ppc64le, openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:df712d87dbe3c49b18a605b01336697d816168127353252568e33023ce1e66e9_ppc64le |
| Red Hat | openshift4/ose-cluster-kube-controller-manager-operator@sha256:075a470799eee154d399f32fe6b87c0a574a45ca97075da0356a88bf52695cd5_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-kube-controller-manager-operator@sha256:075a470799eee154d399f32fe6b87c0a574a45ca97075da0356a88bf52695cd5_arm64, *, * |
| Red Hat | openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le, openshift4/ose-console-operator@sha256:b41a38296f075671e1807d781bd82eacd70568e90b38fdc20e51443f0bc0751f_ppc64le, * |
| Red Hat | openshift4/ose-coredns@sha256:0770efc5e323e64d95a8b7d79f323e17cc107368b12e2e8180646fed1698ffc8_s390x as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/ose-coredns@sha256:0770efc5e323e64d95a8b7d79f323e17cc107368b12e2e8180646fed1698ffc8_s390x, openshift4/ose-coredns@sha256:0770efc5e323e64d95a8b7d79f323e17cc107368b12e2e8180646fed1698ffc8_s390x |
| Red Hat | openshift4/cloud-network-config-controller-rhel8@sha256:3810956951c1988979ac24659c56ba6ec17e09054b6ce85abc4b14e670fc9cf6_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | *, openshift4/cloud-network-config-controller-rhel8@sha256:3810956951c1988979ac24659c56ba6ec17e09054b6ce85abc4b14e670fc9cf6_arm64, openshift4/cloud-network-config-controller-rhel8@sha256:3810956951c1988979ac24659c56ba6ec17e09054b6ce85abc4b14e670fc9cf6_arm64 |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:07dc29a5e52c0023c6371dbba7bcda8cb008ade9073685be879b07e98b116e42_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-alertmanager@sha256:07dc29a5e52c0023c6371dbba7bcda8cb008ade9073685be879b07e98b116e42_ppc64le, *, * |
| Red Hat | openshift4/ose-cluster-authentication-operator@sha256:75d6d6e228c8db448712c8c4ce7463cd8978de42545a1ae2a3664475375d46ff_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-authentication-operator@sha256:75d6d6e228c8db448712c8c4ce7463cd8978de42545a1ae2a3664475375d46ff_ppc64le, openshift4/ose-cluster-authentication-operator@sha256:75d6d6e228c8db448712c8c4ce7463cd8978de42545a1ae2a3664475375d46ff_ppc64le, openshift4/ose-cluster-authentication-operator@sha256:75d6d6e228c8db448712c8c4ce7463cd8978de42545a1ae2a3664475375d46ff_ppc64le |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:f4fcf59199f172cf0accd38331f7c249d46de59952abfec49dbc952cf3fa2f95_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | *, *, * |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:dcb637f76dbe940890eb0960a358f8237414fccbf50c33bb1b317c327f96fe8f_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-insights-rhel8-operator@sha256:dcb637f76dbe940890eb0960a358f8237414fccbf50c33bb1b317c327f96fe8f_amd64, *, openshift4/ose-insights-rhel8-operator@sha256:dcb637f76dbe940890eb0960a358f8237414fccbf50c33bb1b317c327f96fe8f_amd64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:94e3acab7e628f0e655798164ade645680a69a7fdc2ba8b2b2fcf988667ad000_s390x as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-config-operator@sha256:94e3acab7e628f0e655798164ade645680a69a7fdc2ba8b2b2fcf988667ad000_s390x, *, openshift4/ose-machine-config-operator@sha256:94e3acab7e628f0e655798164ade645680a69a7fdc2ba8b2b2fcf988667ad000_s390x |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:33bc668e23d4d3ebb5f9fed08c14663a37a483ddfe5426158ca73e5900623c7d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-ingress-operator@sha256:33bc668e23d4d3ebb5f9fed08c14663a37a483ddfe5426158ca73e5900623c7d_amd64, openshift4/ose-cluster-ingress-operator@sha256:33bc668e23d4d3ebb5f9fed08c14663a37a483ddfe5426158ca73e5900623c7d_amd64, openshift4/ose-cluster-ingress-operator@sha256:33bc668e23d4d3ebb5f9fed08c14663a37a483ddfe5426158ca73e5900623c7d_amd64 |
| Red Hat | openshift4/ose-machine-config-operator@sha256:28869cebbf8e5454493def0e6c8eb9bf33bfd8d56d1ce106a6c6708530c2c1c2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-machine-config-operator@sha256:28869cebbf8e5454493def0e6c8eb9bf33bfd8d56d1ce106a6c6708530c2c1c2_amd64, openshift4/ose-machine-config-operator@sha256:28869cebbf8e5454493def0e6c8eb9bf33bfd8d56d1ce106a6c6708530c2c1c2_amd64, openshift4/ose-machine-config-operator@sha256:28869cebbf8e5454493def0e6c8eb9bf33bfd8d56d1ce106a6c6708530c2c1c2_amd64 |
| Red Hat | openshift4/ose-coredns@sha256:487cf44ab2c299e7cbe0f9e6d4ddd1fcd6bc8256d4ac468092fd58fc7b961e4d_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-coredns@sha256:487cf44ab2c299e7cbe0f9e6d4ddd1fcd6bc8256d4ac468092fd58fc7b961e4d_amd64, openshift4/ose-coredns@sha256:487cf44ab2c299e7cbe0f9e6d4ddd1fcd6bc8256d4ac468092fd58fc7b961e4d_amd64, openshift4/ose-coredns@sha256:487cf44ab2c299e7cbe0f9e6d4ddd1fcd6bc8256d4ac468092fd58fc7b961e4d_amd64 |
| Red Hat | openshift4/ose-prometheus-node-exporter@sha256:06162dfcc7c9e7de786c04f172786c232407957c62b6b31627714b31b143e6ff_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus-node-exporter@sha256:06162dfcc7c9e7de786c04f172786c232407957c62b6b31627714b31b143e6ff_arm64, openshift4/ose-prometheus-node-exporter@sha256:06162dfcc7c9e7de786c04f172786c232407957c62b6b31627714b31b143e6ff_arm64, openshift4/ose-prometheus-node-exporter@sha256:06162dfcc7c9e7de786c04f172786c232407957c62b6b31627714b31b143e6ff_arm64 |
| Red Hat | openshift4/ose-cluster-samples-operator@sha256:de34b48dcb344803b70341a10bae3d42183d671b9cd5a7f5d4f50df68a7af639_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-samples-operator@sha256:de34b48dcb344803b70341a10bae3d42183d671b9cd5a7f5d4f50df68a7af639_arm64, openshift4/ose-cluster-samples-operator@sha256:de34b48dcb344803b70341a10bae3d42183d671b9cd5a7f5d4f50df68a7af639_arm64, openshift4/ose-cluster-samples-operator@sha256:de34b48dcb344803b70341a10bae3d42183d671b9cd5a7f5d4f50df68a7af639_arm64 |
| Red Hat | openshift4/ose-prometheus@sha256:3a6d30d305fb9238cc462d309da1336dd8d5d62b8cf431162f0e2d0afcf867de_ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-prometheus@sha256:3a6d30d305fb9238cc462d309da1336dd8d5d62b8cf431162f0e2d0afcf867de_ppc64le, *, openshift4/ose-prometheus@sha256:3a6d30d305fb9238cc462d309da1336dd8d5d62b8cf431162f0e2d0afcf867de_ppc64le |
| Red Hat | openshift4/ose-cluster-ingress-operator@sha256:435ca54c6bada76ec200d0420b62bdd40890fb879c8c99e60a76c5d353cddfc0_arm64 as a component of Red Hat OpenShift Container Platform 4.13 | openshift4/ose-cluster-ingress-operator@sha256:435ca54c6bada76ec200d0420b62bdd40890fb879c8c99e60a76c5d353cddfc0_arm64, openshift4/ose-cluster-ingress-operator@sha256:435ca54c6bada76ec200d0420b62bdd40890fb879c8c99e60a76c5d353cddfc0_arm64, openshift4/ose-cluster-ingress-operator@sha256:435ca54c6bada76ec200d0420b62bdd40890fb879c8c99e60a76c5d353cddfc0_arm64 |
…and 109 more
Timeline
- Nov 8, 2023 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 21, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2023:6257 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2243296 issue
- https://issues.redhat.com/browse/OCPBUGS-11604 advisory
- https://issues.redhat.com/browse/OCPBUGS-11926 advisory
- https://issues.redhat.com/browse/OCPBUGS-13330 advisory
- https://issues.redhat.com/browse/OCPBUGS-14344 advisory
- https://issues.redhat.com/browse/OCPBUGS-18284 advisory
- https://issues.redhat.com/browse/OCPBUGS-18468 advisory
- https://issues.redhat.com/browse/OCPBUGS-18698 advisory
- https://issues.redhat.com/browse/OCPBUGS-22299 advisory
- https://issues.redhat.com/browse/OCPBUGS-22333 advisory
- https://issues.redhat.com/browse/OCPBUGS-22390 advisory
- https://issues.redhat.com/browse/OCPBUGS-22402 advisory
- https://issues.redhat.com/browse/OCPBUGS-22412 advisory
- https://issues.redhat.com/browse/OCPBUGS-2812 advisory
- https://issues.redhat.com/browse/OCPBUGS-7652 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6257.json advisory
- https://access.redhat.com/security/cve/CVE-2023-39325 advisory
…and 6 more